CherryTree get's flagged as "Potentially unwanted app found" - Is this a false positive - Who can say that this software is legit?

[TheBigFatClown]

I've just downloaded and installed the CherryTree software because I trust the recommendation of the TechSpot website. But still, bad players can sneak through the cracks, and people find out much later when software has been doing bad things for awhile. Anybody with experience using this software who can vouch that it is legit?

 

[Passcode3463]

When checking out new software, in addition to checking its reputation, you can also upload it to VirusTotal to see if any security vendors flag the file. If the file has been around for a while (7 days+), it’s likelier the file is safe. However, even this isn’t 100% foolproof—some malicious files that are new and sneaky may get by for weeks.

Nowadays, you can ask a search AI to see if the software has been reported in forums like Reddit, etc.

 

[Anna Macintosh]

For what it's worth: this kind of false-positive flag happens a lot to smaller, legitimate software. Not because something's wrong, but because antivirus/SmartScreen-style heuristics lean heavily on install-base and file "reputation," which a niche app just hasn't built up yet. I run a small Mac app and we see the same pattern on our side (Gatekeeper/notarization flags on new builds even after going through Apple's own verification). VirusTotal is a solid first check, like already suggested. I'd also look for basic trust signals: a real website, a changelog, a developer who responds to issues. That combination tells you more than any single scanner verdict.